ATTORNEY DOCKET NO. 26016.0004U1 
APPLICATION NO. 10/506,739 



This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims 

1 . (Previously presented) A method of conducting an on-line transaction including the 
steps of : 

generating a single use transaction request identification with a transaction manager 
apparatus; 

storing the generated single use transaction request identification in a relationship with an 
identifier of a registered user and banking information of the registered user in a storage of the 
transaction manager apparatus; 

sending the generated single use transaction request identification to the registered user 
from the transaction manager apparatus; 

receiving at the transaction manager apparatus a payment request comprising a received 
user identifier, a value and information for making a fund transfer of the value from the 
registered user identified by the received user identifier to an identified recipient, the payment 
request also including a received transaction request identification; 

determining the validity of the received payment request by checking the validity of the 
received transaction request identification and whether the received transaction request 
identification is stored in a relationship with the received user identifier with the transaction 
manager apparatus; 

disabling re-use of the single use transaction request identification; 

sending an EFT request to a financial institution system to transfer the value in funds 
from the registered user to the recipient only if the received payment request is valid, the EFT 
request including the banking information, such that the financial institution is able to check 
whether sufficient funds are present in a user's financial institution account and, if in the event 
that sufficient funds are present the financial institution is able to perform the transfer according 
to the EFT request; 
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receiving at the transaction manager apparatus confirmation of the transfer from the 
financial institution when the transfer is performed; and 

sending a confirmation message from the transaction manager apparatus to one or more 
of the group consisting of the user and the recipient. 

2. (Cancelled ) 

3. (Original) A method according to claim 1, wherein the transaction request 
identification is a random number. 

4. (Original) A method according to claim 1, wherein the transaction request 
identification is generated using a formula. 

5. (Original) A method according to claim 1, wherein the transaction request 
identification is generated using a random number and a formula. 

6. (Previously presented) A method according to claim 1, wherein the payment request 
further comprises a component provided by the registered user. 

7. (Currently amended) A method according to claim 6 [[26]], wherein the recipient is 
provided with a further combination of the transaction requested identification and the user 
provided component. 

8. (Original) A method according to claim 1, wherein the banking information related to 
the transaction request identification includes a credit card or debit card number, a card expiry 
date and a cardholder name. 

9. (Previously presented) A method according to claim 1, wherein the banking 
information includes a bank account number. 

10. (Previously Presented) A method according to claim 8, wherein the banking 
information includes bank account type and bank account holder information. 

11. (Previously Presented) A method according to claim 1, further comprising 
registering an unregistered user prior to the generation of the transaction request identification. 
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12. (Previously presented) A method according to claim 11, wherein registration of the 
user comprises creating a transaction manager user account, and the identifier of the registered 
user is a transaction manager account number allocated by the transaction. 

13. (Previously Presented) A method according to claim 12, further comprising the 
transaction manager apparatus confirming the banking information with the user's financial 
institution before creation of the transaction manager user account. 

14. (Previously presented) A method according to claim 6, further comprising the 
transaction manager apparatus receiving the user provided component from the user 
independently from and before receiving the purchase request and storing the user provided 
component in the storage in a relationship with the identifier of the registered user. 

15. (Cancelled) 

16. (Previously presented) A method according to claim 14, wherein determining the 
validity of the received payment request further comprises comparing the user provided 
component received in the payment request with the stored user provided component and 
determining that the payment request is invalid when the user provided component is not the 
same as or based on the stored user provide component. 

17. (Previously presented) A method according to claiml4, wherein the user provided 
component comprises a secret identification of the user known to the registered. 

18. (Previously Presented) A method according to claim 1, further comprising storing the 
transaction request identification in association with, a transaction limit and with a transaction 
limit override password, wherein the transaction manager apparatus does not send the EFT 
request if the value is above the transaction limit and the transaction limit override password is 
not received in the payment request. 

19. (Previously presented) A method according to claim 1, further comprising sending 
the registered user another single use transaction request identification from the transaction 
manager apparatus upon receipt at the transaction manager apparatus of a request by the 
registered user. 
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20. (Previously presented) A method according to claim 1, further comprising registering 
a merchant with the transaction manager apparatus as one of a number of possible recipients. 

21 . (Previously Presented) A method according to claim 20, wherein registration of the 
merchant comprises the transaction manager apparatus providing the merchant with a merchant 
identification and the transaction manager apparatus storing merchant banking information in a 
relationship with the merchant identification. 

22. (Previously Presented) A method according to claim 20, wherein the purchase 
request received by the transaction manager apparatus includes the merchant identification. 

23. (Previously presented) A method according to claim 20, further comprising the 
registered user requesting purchase of a product or service having the value from the merchant 
and the merchant providing the payment request to the transaction manager. 

24. (Previously presented) A method according to claim 1, further comprising the 
registered user nominating an item for purchase and a merchant device of the recipient 
constructing the purchase request including determining the value in the purchase request based 
on the nominated item. 

25. (Previously presented) A method according to claim 1, wherein checking the validity 
of the received transaction request identification in the payment request comprises checking 
whether the transaction request identification received in the payment request is the same as or 
derived from the transaction request identifier stored in the relationship with the user identifier. 

26. (Previously presented) A method according to claim 6, further comprising combining 
the transaction request identification and the user provided component by hatching the 
transaction request identification and the user provided identification component. 

27. (Previously presented) A method according to claim 15, wherein disabling of the use 
of the transaction request identification comprises removing the relationship between the 
transaction request identification and the user's transaction manager account number. 



1101778 



5 



ATTORNEY DOCKET NO. 26016.0004U1 
APPLICATION NO. 10/506,739 

28. (Previously presented) A method according to claim 6, wherein the user provided 
component comprises a secret identification of the user known to the registered user and 
recorded in the financial institution. 

29. (Previously presented) A method according to claim 15, wherein disabling use of the 
transaction request identification includes the step of adding the transaction request identification 
to a spent list, the spent list being used to ensure a transaction request identification is not reused. 

30. (Previously presented) A method according to claim 21, wherein the EFT request 
sent to the financial institution comprises the user's banking, the value and merchant account 
banking information and is sent to the financial institution system to transfer the funds according 
to a standard electronic fund transfer process. 

3 1 . (Previously presented) A method according to claim 1 , further comprising the 
financial institution sending an insufficient funds reply if sufficient funds are not present, 
whereupon the transaction manager apparatus sends an insufficient funds reply to the recipient. 

32. (Previously presented) A method according to claim 1, wherein the confirmation 
message sent from the transaction manager apparatus to the recipient is the same as the 
confirmation of the transfer received from the financial institution. 

33. (Previously presented) A method according to claim 1, wherein the confirmation 
message sent from the transaction manager to the recipient is created by the transaction manager 
apparatus and is different to the confirmation of the transfer received from the financial 
institution. 

34. (Previously presented) A method according to claim 4, wherein disabling re-use of 
the transaction request identification includes the formula for generating the single use 
transaction request identification including an increment in the next generated transaction 
identification request. 

35. (Previously presented) A method according to claim 1, wherein generating the 
transaction identification includes providing a check sum digit or character in the transaction 
request identification. 
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36. (Original) A method according to claim 34, wherein the transaction request 
identification is a number. 

37. (Previously presented) A method according to claim 1, further comprising sending a 
confirmation of the transfer of funds from the transaction manager apparatus to the registered 
user. 

38. (Previously presented) A method according to claim 37, wherein the confirmation 
sent to the registered user is an e-mail message. 

39. (Previously presented) A method according to claim 1, wherein the transaction 
request identification is to the registered via the Internet. 

40. (Previously presented) A method according to claim 1, wherein the transaction 
request identification is sent to the registered user by a telephone interface system. 

41. (Previously presented) A method according to claim 1, wherein sending the 
transaction request identification to the registered user comprise sending the transaction request 
identification to a portable storage device held by the user. 

42. (Previously presented) A method according to claim 41, further comprising sending 
the transaction request identification from the portable storage device to the recipient. 

43. (Previously presented) A method according to claim 41, wherein sending the 
transaction request identification to the portable storage device comprises sending a plurality of 
transaction request identifications to the portable storage device and storing the identifications in 
the portable storage device. 

44. (Previously presented) A method according to claim 1, further comprising sending a 
plurality of transaction request identifications to the user. 

45. (Previously presented) A method according to claim 1, further comprising the 
transaction manager apparatus managing a plurality of registered users each having a plurality of 
transaction request identifications available for use in making a purchase. 

46. (Cancelled) 
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47. (Previously presented) A method according to claim 1, wherein sending the EFT 
request from the transaction manager apparatus to the financial institution comprising selecting 
the financial institution from a plurality of financial institutions according to the banking 
information retrieved according to the payment request after the payment request is validated. 

48. (Previously presented) A method of conducting an on-line transaction including the 
steps of : 

generating a single use transaction request identification with a transaction manager 
apparatus; 

storing the transaction request identification in a relationship with an identifier of a 
registered user and banking information of the registered user in a storage of the transaction 
manager apparatus; 

sending the transaction request identification to the registered user from the transaction 
manager apparatus; 

receiving a request to transfer an amount from a user account to another account at the 
transaction manager apparatus, the transfer request including an identifier of the user's financial 
institution account, an identifier of the other account, a received transaction request identification 
and the amount; 

determining the validity of the transfer request by the transaction manager apparatus 
checking the validity of the received transaction; 

disabling re-use of the single use transaction request identification ; 

sending an EFT request to a financial institution system to transfer the amount of funds 
from the user's account to the other account only if the received transaction request identification 
is valid, the EFT request including source banking information selected from the banking 
information according to the received identifier of user's financial institution account such that 
the financial institution system is able to check whether sufficient funds are in the user's financial 
institution account and if sufficient funds are present perform the transfer; 
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receiving at the transaction manager apparatus confirmation of the transfer from the 
financial institution; and 

sending a confirmation message from the transaction manager to the user. 

49. (Previously presented) A transaction manager apparatus for conducting an on-line 
transaction, said apparatus comprising: 
means for registering a user; 

means for generating a single use transaction request identification; 

means for sending a generated transaction request identification to the registered user; 

means for storing the generated transaction request identification in a relationship with an 
identifier of the registered user and banking information of the registered user; 

means for receiving a payment request, the payment request comprising a received user 
identifier, a value and information for making a fund transfer of the value from the registered 
user identified by the received user identifier to an identified recipient, the payment request also 
including a received transaction request identification and an identification of a recipient; 

means for determining the validity of the received payment request by checking the 
validity of the received transaction request identification and whether the received transaction 
request identification is stored in a relationship with the received user identifier and disabling re- 
use of the single use transaction request identification; 

means for sending an EFT request to a financial institution system to transfer the value in 
funds from the registered user to the recipient, only if the payment request is valid, the EFT 
request including the banking information; 

means for receiving confirmation of the transfer from the financial institution when the 
transfer is performed; and 

means for sending a confirmation message to one or more of the group consisting of the 
user and the recipient. 
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50. (Previously presented) A transaction manager for conducting an online transaction, 
comprising: 

a generator of a single use transaction request identification; 

a transmitter for sending a registered user a generated single use transaction request 
identification; 

a storage for storing the transaction request identification in a relationship with an 
identifier of a registered user and banking information of the registered user; 

a receiver for receiving a payment request, the payment request comprising a received 
user identifier, a value and information for making a fund transfer of the value from the 
registered user identified by the received user identifier to an identified recipient, the payment 
request also including a received transaction request identification; 

a processor configured to determine the validity of the received payment request by 
checking the validity of the received transaction request identification and whether the received 
transaction request identification is stored in a relationship with the received user identifier, and 
disable re-use of the single use transaction request identification; 

a transmitter for sending an EFT request to a financial institution system to transfer the 
value in funds from the registered user to the recipient only if the payment request is valid, the 
EFT request including the banking information; 

a receiver for receiving confirmation of the transfer from the financial institution when 
the transfer is performed; and 

a transmitter for sending the a confirmation message to one or more of the group 
consisting of the user and the other recipient. 

5 1 . (Previously presented) A method according to claim 1 , wherein the transaction 
request identification is a string of characters. 

52. (Previously presented) A method according to claim 1, wherein the transaction 
request identification is a randomly generated string of characters. 
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53-71 (Cancelled) 

72. (Previously presented) A method according to claim 1, further comprising recording 
a user identifier for each of a plurality of users registered in the transaction manager apparatus. 

73. (Previously presented) A method according to claim 72, wherein the payment request 
comprises a recipient identifier indicative of a recipient account for receipt of the funds transfer. 

74. (Previously presented) A method according to claim 73, further comprising 
retrieving the stored transaction request identification from within the storage of the transaction 
manager apparatus based on the received user identifier for determination whether the received 
transaction request identification is stored in a relationship with the received user identifier. 

75. (Previously presented) A method according to claim 1, further comprising 
identifying the registered user when a remotely located electronic device of the registered user 
connects to the transaction manager apparatus. 

76. (Previously presented) A method according to claim 75, wherein generation of the 
single use transaction request identification occurs when the registered user is identified. 

77. (Previously presented) A method according to claim 25, further comprising 
terminating the transaction when the received transaction request identifier is not validated. 

78. (Cancelled) 

79. (Previously presented) A method according to claim 1, wherein the confirmation 
message is sent from the transaction manager apparatus to a merchant electronic device of the 
recipient. 

80. (Previously presented) A method according to claim 79, wherein the registered user 
causes the transaction request identification to be sent from a user electronic device to the 
merchant electronic device. 

8 1 . (Previously presented) A method according to claim 80, wherein the merchant 
electronic device sends the payment request to the transaction manager apparatus. 
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82. (Previously presented) A method according to claim 1, comprising receiving an 
insufficient funds message from the financial institution computer system if sufficient funds are 
not present to conduct the transactional interaction, whereupon the transaction manager 
apparatus sends an insufficient funds message to the recipient. 

83. (Previously presented) A method according to claim 1, further comprising sending a 
plurality of transaction request identifications to a user's electronic device in one transfer. 

84. (Previously presented) A method according to claim 1, further comprising inputting 
registration information of a prior registered user into the transaction manager apparatus, the 
registration information including the banking information. 

85. (Previously presented) A method of conducting an on-line transactional interaction 
comprising the steps of : 

recording a user identifier for each of a plurality of user's registration in a transaction 
manager apparatus; 

identifying a registered user when a remotely located electronic device of the registered 
user connects to the transaction manager apparatus; 

generating a single use transaction request identification within the transaction manager 
apparatus when the registered user is identified; 

receiving at the transaction manager apparatus a secret code known to and provided by 
the identified registered user; 

storing in the transaction manager apparatus the generated single use transaction request 
identification in association with a user identifier of the identified registered user, the secret code 
and banking information of the identified registered user for use by a financial institution 
computer system in association with the user identifier; 

sending the generated single use transaction request identification from the transaction 
manager apparatus to the electronic device; 



1101778 



12 



ATTORNEY DOCKET NO. 26016.0004U1 
APPLICATION NO. 10/506,739 

receiving at the transaction manager apparatus a payment request comprising a request 
identifier, a user identifier, a recipient identifier, a value and a test code; 

retrieving the stored transaction request identification and the secret code from within the 
transaction manager apparatus based on the received user identifier; 

determining the validity of the received request identifier by the transaction manager 
apparatus checking whether the received request identifier is the same as or based on the 
retrieved transaction request identification and whether the test code is the same as or based on 
the secret code, and disabling re-use of the single use transaction request identification when the 
received request identifier is validated, and terminating the transactional interaction when the 
received request identifier is not validated; 

retrieving the stored banking information of the registered user in the stored data 
relationship with the received user identifier; 

sending an EFT request message from the transaction manager apparatus to the financial 
institution computer system to transfer the value in funds from a user account to a recipient, the 
EFT request message including the banking information associated with the received user 
identifier, the recipient identifier, and the value; 

receiving at the transaction manager apparatus a first confirmation message from the 
financial institution computer system when the transactional interaction has been successfully 
completed according to the EFT request message; and 

sending a second confirmation message from the transaction manager apparatus to a 
second electronic device when the first confirmation message is received. 

86. (Currently amended) A transaction manager apparatus for managing an online 
transaction, comprising: 

a recording component configured to record a user identifier for a plurality of registered 

an identification component configured to identify a registered user when a remotely 
located electronic device of the registered user connects to the transaction manager apparatus; 
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a generator configured to generate a single use transaction request identification when 
the registered user is identified; 

a receiver configured to receive at the transaction manager apparatus a secret code known 
to and provided by the identified registered user; 

storage component configured to store in the transaction manager apparatus the generated 
single use transaction request identification in association with a user identifier of the identified 
registered user, the secret code and banking information of the identified registered user for use 
by a financial institution computer system in association with the user identifier; 

a data transmitter arranged to send the generated single use transaction request 
identification to the electronic device; 

a data receiver arranged to receive a payment request comprising a request identifier, a 
user identifier, a recipient identifier, a value and a test code; 

a first data retriever configured to retrieve the stored transaction request identification and 
the secret code from within the storage component based on the received user identifier; 

a validity checker configured to determine the validity of the received request identifier 
by checking whether the received request identifier is the same as or based on the retrieved 
transaction request identification and whether the test code is the same as or based on the secret 
code, and disabling re-use of the single use transaction request identification when the received 
request identifier is validated, and terminating the transactional interaction when the received 
request identifier is not validated; 

a second data retriever configured to retrieve the stored banking information of the 
registered user in the stored data relationship with the received user identifier; 

a first message transmitter configured to send an EFT request message from the 
transaction manager apparatus to the financial institution computer system to transfer the value 
in funds from a user account to a recipient, the EFT request message including the banking 
information associated with the received user identifier, the recipient identifier, and the value; 
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a message receiver configured to receive at the transaction manager apparatus a first 
confirmation message from the financial institution computer system when the transactional 
interaction has been successfully completed according to the EFT request message; and 

a second message transmitter configured to send a second confirmation message to a 
second electronic device when the first confirmation message is received. 

87. (New) A method according to claim 24, wherein the payment request is constructed 
from the user identifier and transaction request identifier received from the user. 

88. (New) A method according to claim 87, wherein the payment request is also 
constructed from a user provided secret component sent to the merchant device. 

89. (New) A method according to claim 48, wherein the other account is a financial 
institution account also held by the registered user. 

90. (New) A method according to claim 89, wherein the EFT request comprises 
destination bank account information selected from the stored banking information according to 
the identifier of the other account. 

91. (New) A method according to claim 1, wherein the generated single use transaction 
request identifier is only sent to the registered user once the registered user is identified to the 
satisfaction of the transaction manager apparatus, wherein identifying the registered user occurs 
when a remotely located electronic device of the registered user connects to the transaction 
manager apparatus. 

92. (New) A method according to claim 1, wherein the EFT request comprises 
destination bank account information which is selected from stored banking information of a 
plurality of recipients according to a recipient identifier in the payment request after the payment 
request is validated. 
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